CVE-2026-64541

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the SMC-R implementation. The function smc cdc rx handler() retrieves a connection using a token while holding the conns lock of the link group. After releasing the lock, the function dereferences the connection and the associated smc sock, eventually calling sock hold() within smc cdc msg recv(). Because no reference is maintained after the lock is released, a concurrent execution of close() leading to smc lgr unregister conn() can free the smc sock memory. This results in sock hold() operating on freed memory, which can lead to a kernel panic. Use-After-Free is a condition where a program continues to use a pointer after it has been freed, potentially leading to crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.